md5? Is 'jammy' a remarkably old platform? I hope so.
But regardless of the signature algorithm, thanks for sharing the mechanism.
Re:You can do a lot with an empty file
by userbinator on Wednesday April 06, 2022 @07:12PM
(#30938613)
2002 according to the copyright. But it also has this note:
debsums is intended primarily as a way of determining what installed files have been locally modified by the administrator or damaged by media errors and is of limited use as a security tool.
Re:You can do a lot with an empty file
by Dylan16807 on Wednesday April 06, 2022 @11:18PM
(#30940267)
> md5? Is 'jammy' a remarkably old platform? I hope so.
Jammy comes out next month.
Though if you encounter an md5 second preimage attack that's pretty impressive.
"rpm -qV" is a command that will audit the signatures of a package's contents. I don't know if dpkg has something similar but it would be cool if it did.